CVE-2026-25191 | BDVDB-2026-317490 Detail
Digital ArtsFinalCode Ver.5 series
Description#
The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.
Impact#
Per CVSS v3.0: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-427 Uncontrolled Search Path Element
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.